General
- Target 2026-08-13_86a4f9c13e2537c84913cf575068923d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260813-kwj2qawanf
- SHA256 1f90374bc3c375c8a77eee9ef068661f272dbaecf36a02116ded6a7fa21d90eb
- MD5 86a4f9c13e2537c84913cf575068923d
- SHA1 d1bfb4003be63753c3226d24941b32862499e31c
- SHA512 6a85365e2c3f1e001f2324358661b60406ab469eb0d9185bf3aa0a0c6c43916b93192dff562f13d2ec46d4dd368e38c0a329b2feab84837b212caef4f5c8b197
- SSDEEP 12288:MwKfOVRo9yRYOnT4O8b8ITDnlFtTx5KEZF46jM:MxWVeyRYY4O8b8ITDnldDY
- TLSH T11B356F2162F98A29F5F33F304A719E65EA76BC559AB8854E2259331D0F34BB1CD30723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_86a4f9c13e2537c84913cf575068923d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_86a4f9c13e2537c84913cf575068923d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_86a4f9c13e2537c84913cf575068923d_elex_glassworm_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 1f90374bc3c375c8a77eee9ef068661f272dbaecf36a02116ded6a7fa21d90eb
- MD5 86a4f9c13e2537c84913cf575068923d
- SHA1 d1bfb4003be63753c3226d24941b32862499e31c
- SHA512 6a85365e2c3f1e001f2324358661b60406ab469eb0d9185bf3aa0a0c6c43916b93192dff562f13d2ec46d4dd368e38c0a329b2feab84837b212caef4f5c8b197
- SSDEEP 12288:MwKfOVRo9yRYOnT4O8b8ITDnlFtTx5KEZF46jM:MxWVeyRYY4O8b8ITDnldDY
- TLSH T11B356F2162F98A29F5F33F304A719E65EA76BC559AB8854E2259331D0F34BB1CD30723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory